Description
Products with Unified Automation .NET based OPC UA Client/Server SDK Bundle: Versions V3.0.7 and prior (.NET 4.5, 4.0, and 3.5 Framework versions only) are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a stack overflow.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | OPC UA Products Built with the .NET Framework 4.5, 4.0, and 3.5 | Unified Automation .NET based OPC UA Client/Server SDK Bundle: Versions V3.0.7 and prior (.NET 4.5, 4.0, and 3.5 Framework versions only) | — |
Advisories 2
- VDE-2021-008 Beckhoff: Stack Overflow and XXE vulnerability in various OPC UA products CERT@VDE · May 22, 2025
- ICSA-21-133-04 OPC UA Products Built with the .NET Framework 4.5, 4.0, and 3.5 CISA ICS & IT advisories · May 13, 2021